smokeloader | 690ce76f20f9412ea314611ee68da692b70a1492d62420baf326a68eb8b198d9 | Triage

Sharing

General

Target

690ce76f20f9412ea314611ee68da692b70a1492d62420baf326a68eb8b198d9
Size

275KB
Sample

240524-acf6lseb4w
MD5

c7174882077dce57b8188a56634054b9
SHA1

ca16db4b3d27de40d43e5fb42e6ee807a411cd04
SHA256

690ce76f20f9412ea314611ee68da692b70a1492d62420baf326a68eb8b198d9
SHA512

f436caf4033e15dfa7a0d0a1c5d5b45bd00c5198b70a5f670d2ac63bf5bb8349913f28a4e74c2a9991c4c4b074f3b146bc6acf8c0183911460e814abd8f7486b
SSDEEP

1536:fm1IU7jn5+0iKTCuLzkLCnct3GgVlIhcjCYEsxvdlpCA4TUeJcW4r41DWoQFIXss:IIml+i1ct3jZ4+3r55osO5Aa7hBy

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  690ce76f20f9412ea314611ee68da692b70a1492d62420baf326a68eb8b198d9
- Size
  
  275KB
- MD5
  
  c7174882077dce57b8188a56634054b9
- SHA1
  
  ca16db4b3d27de40d43e5fb42e6ee807a411cd04
- SHA256
  
  690ce76f20f9412ea314611ee68da692b70a1492d62420baf326a68eb8b198d9
- SHA512
  
  f436caf4033e15dfa7a0d0a1c5d5b45bd00c5198b70a5f670d2ac63bf5bb8349913f28a4e74c2a9991c4c4b074f3b146bc6acf8c0183911460e814abd8f7486b
- SSDEEP
  
  1536:fm1IU7jn5+0iKTCuLzkLCnct3GgVlIhcjCYEsxvdlpCA4TUeJcW4r41DWoQFIXss:IIml+i1ct3jZ4+3r55osO5Aa7hBy
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan